PERSONAL DATA NOTICE

Introduction

This Personal Data Protection Notice (“Notice”) is issued by Badan Pengawas Pemegang Saham Minoriti Berhad, also known as the Minority Shareholders Watch Group (MSWG). This Notice applies to all individuals whose personal data is processed by or on behalf of MSWG. The terms “personal data”, “sensitive personal data” and “processing” shall have the meanings assigned to them under the Personal Data Protection Act 2010 (“the Act”). This Notice explains how MSWG collects, uses, discloses, safeguards and manages personal data in the course of carrying out its functions, activities, and operations.

Collection of Personal Data

MSWG may collect a range of personal data from you, which may include your name, identification number, contact details, e-mail address, employer or organisation, job title, gender, nationality, photographs, video or audio recordings, login credentials, payment details, and any other information that you have voluntarily provided to us from time to time.

Such data may also relate to your participation in our events, briefings, shareholder meetings, training programmes, conferences, surveys, or other engagements organised or supported by MSWG. Personal data may be collected directly from you through forms, correspondence, meetings, digital platforms, website registrations or social media interactions. MSWG may also obtain personal data from publicly available sources, regulatory or government databases, third parties such as employers, professional bodies or service providers authorised to disclose information, or from any other lawful sources permitted by applicable law.

Purposes of Processing

Subject to the Act and any other applicable laws, MSWG may process your personal data for various purposes. These include fulfilling statutory duties and obligations under the Capital Markets and Services Act 2007, the Companies Act 2016, and other relevant legislation, as well as meeting responsibilities to the Securities Commission Malaysia, Bursa Malaysia Securities Berhad, and other regulators.

MSWG may also process your personal data to manage communications, stakeholder engagements, subscriptions, research activities and shareholder advocacy initiatives; to organise, administer and publicise events, award ceremonies, or training programmes; to provide access to MSWG’s online services, reports or portals; to respond to enquiries, feedback or complaints; to verify your identity and maintain the security of MSWG’s systems or premises; to publish photographs, videos or testimonials from your participation in MSWG’s events; to circulate information, updates, newsletters or materials relevant to MSWG’s programmes or those of its partners; to consider applications for employment or collaboration; to manage internal administration, compliance and recordkeeping; and for any other purpose authorised by you or incidental to those stated above.

Consequences of Not Providing Personal Data

Unless otherwise specified at the point of collection, it is obligatory for you to provide the personal data requested by MSWG. Failure to do so may result in MSWG being unable to process your request, facilitate your participation, respond to your enquiries, or fulfil its obligations under applicable laws and regulations.

Accuracy and Completeness of Personal Data

You are responsible for ensuring that the personal data you provide to MSWG is accurate, complete, not misleading, and kept up to date. You should notify MSWG in writing of any changes to your personal data to ensure that our records remain current and accurate.

Access, Correction and Enquiries

You may request access to or correction of your personal data, or make enquiries and complaints regarding how your personal data is processed by MSWG. In accordance with the Act, MSWG may impose a reasonable fee for processing access requests or may refuse such requests in circumstances permitted by law. All communications relating to access, correction or enquiries regarding personal data should be directed to [email protected]

Limiting or Withdrawing Consent

You may at any time give written notice to limit or withdraw your consent to MSWG’s processing of your personal data. Such withdrawal may, however, affect MSWG’s ability to provide certain services or to include you in its activities or programmes. Any withdrawal of consent will be subject to applicable legal restrictions and a reasonable period to take effect.

Disclosure of Personal Data

Subject to the Act and other written laws, your personal data may be disclosed to relevant authorities, regulatory bodies, professional associations, event organisers, service providers, auditors, consultants, and other persons where necessary to achieve the purposes stated in this Notice. This includes disclosure to regulatory authorities such as the Securities Commission Malaysia, Bursa Malaysia Securities Berhad, Companies Commission of Malaysia, Bank Negara Malaysia, Royal Malaysia Police, and the Malaysian Anti-Corruption Commission. It may also include disclosure to professional or governance bodies such as the Institute of Corporate Directors Malaysia (ICDM), the Malaysian Institute of Chartered Secretaries and Administrators (MAICSA), or other similar organisations; to MSWG’s partners, contractors, and technical service providers who support MSWG’s operations; or to any person or entity as required by law, regulation, court order, or with your consent. When personal data is shared with third parties, MSWG will take reasonable steps to ensure that they provide appropriate levels of protection and use the data only for authorised purposes.

Transfer of Personal Data Abroad

Your personal data may be transferred, stored or processed outside Malaysia where necessary for operational efficiency or for the purposes stated in this Notice. By providing your personal data to MSWG, you consent to such transfers, which may involve jurisdictions with different data protection standards than those applicable in Malaysia. MSWG will take reasonable precautions to ensure that such transfers are conducted securely and in compliance with applicable data protection laws.

Retention of Personal Data

MSWG will retain your personal data for as long as it is necessary to fulfil the purposes for which it was collected or as required by applicable laws, regulations, or internal policies. Once retention is no longer necessary, the personal data will be securely deleted or anonymised.

Language

In the event of any inconsistency between the English version of this Notice and any translated version, including Bahasa Malaysia, the English version shall prevail. MSWG shall not be liable for any loss or misunderstanding arising from the use or reliance on any translated version

Updates to This Notice

MSWG reserves the right to amend or update this Notice at any time to reflect changes in its data processing practices or in accordance with legal and regulatory developments. The latest version of this Notice will be published on MSWG’s website at www.mswg.org.my or communicated through other suitable channels. You are advised to check this Notice periodically to stay informed of any updates.

Consent

By providing your personal data to MSWG through any means, including through the Website, correspondence, participation in events or activities, or otherwise, you acknowledge that you have read and understood this Notice and consent to the processing of your personal data in accordance with its terms and with the Personal Data Protection Act 2010.

MSWG Subscriber Portals

COMING SOON